|
in my opinion sharing should be nailed at the server level. these days any semi-popular site is likely getting both pro and kiddy hacked 24/7. we have 1 site that gets hit professionally from 8am to 5pm Hong Kong time. they use so many IPs its impossible to prescreen by country or subnet. i guess Chinese hackers work on day shift.
we built our cloud network around our cms, so the servers and security are integrated. the network does a pretty good job of fighting off approx 100k unique attacks per day. what the security script basically does is check the access log every minute and store some data about usernames being used, IPs, and other details. then it bans the assholes from the entire network.
blocking bad users from signing in should be a basic function of any security system. i think its better to kick them off the entire server or network for trying to share or hack.
#
__________________
#
|